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DETAILED ACTION 

1. Claims 1-7, 9-27 and 29-35 are pending in this application 

Response to Arguments 

2. Applicant's arguments filed 06/28/04 have been fully considered but they are not 
persuasive. 

Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

3. Claims 1,13 and 21 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Korzeniowski (Uncle Sam surfs via Lotus Notes) April 1, 1996 in view of Winn 
Schwartau (Wipe out Web Graffiti, CNN.com) Feb 21 , 2000. 

Regarding on claims 1 , 13 and 21, Korzeniowski teaches in a computer system, 
a method for protecting a target file located at a target location, comprising the step of: 

Generating an archive having an archive file, wherein the archive file comprises a 
mater copy of the target file (the archive file needed to be created before the 
comparison process) (page 1 , lines 48-50); 

Detecting changes to the target file by periodically comparing the target file to the 
archive file, wherein the comparison comprises comparing one of the content, size and 
date/time of the target file to the corresponding archive file (every 4 or 5 minutes, Notes 
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will examine a Web page, notice any change, check to determine if it is legitimate) 
(page 1, lines 49-50); and 

Protecting, as necessary, the target file by automatically replacing, without 
human intervention, the target file such that the target file is identical to the archive file, 
wherein the replacing occurs when the comparison indicates that the target file is not 
identical to the archive file (revert to the original format if the change was not 
authorized" (page 1, lines 50-51). Lotus notes suggests only the method of doing so, 
however, none of the system have been implemented system. On the other hand, Winn 
Schwartau discloses in the CNN.com "system such as Tripwire can be configured to 
check for integrity violation-unauthorized file modification-on periodic basic (for 
example, hourly or daily) and will check only those files chosen by the administrator." 
(page 2, CNN.com, lines 45-47). The Tripwire is configured for a web security system. 
Therefore, it would have been obvious to one ordinary skill in the art at the time of the 
invention was made to modify Korzeniowski method to include Winn Schwartau's 
system to produce a security product based on the a method which implemented on the 
system to protect web content from being hacked. 

4. Claims 2-7, 9-1 1 , 14-19, 22-27, 29-31 and 33-35 are rejected under 35 U.S.C. 
103(a) as being unpatentable over Korzeniowski (Uncle Sam surfs via Lotus Notes) 
April 1 , 1996 in view of Winn Schwartau (Wipe out Web Graffiti, CNN.com) Feb 21 , 
2000 and further in view of Saether et al. (US. Patent No. 6,405,219). 

Regarding on claims 2, 14 and 22, Korzeniowski and Winn Schwartau do not 
explicitly teach the generated archive comprises at least one file collection having the 
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archive file. However, Saether teaches "the primary and secondary global servers copy 
the previous versions of modified source files and restores removed source files from 
the previous version to at least one sub-directory on the local content servers" (col. 10, 
lines 7-11). This teaches multiples version of the source file. Therefore, it would have 
been obvious to one ordinary skill in the art at the time of the invention was made to 
modify Korzeniowski and Winn Schwartau's system to include the multiples version of 
the source files as taught by Saether in order to restored the right version as needed. 

Regarding on claims 3, 15 and 23, Korzeniowski and Winn Schwartau's system 
Lotus notes does not teach the file collection comprises a current portion and a revision 
portion. Saether teaches "the primary and secondary global servers copy the previous 
versions of modified source files and restores removed source files from the previous 
version to at least one sub-directory on the local content servers" (col. 10, lines 7-11). 
This teaches multiples version of the source file. Therefore, it would have been obvious 
to one ordinary skill in the art at the time of the invention was made to modify 
Korzeniowski and Winn Schwartau's system to include the multiples version of the 
source files in order to restored the right version as needed. 

Regarding on claims 4, 16 and 24, Korzeniowski and Winn Schwartau do not 
explicitly teach the revision portion comprises at least one sub-division, wherein each 
sub-division represents a different revision of the archive file. However, Seather 
teaches "the primary global server also generates a server change container for each 
for each secondary global server based on its path and difference between the updated 
version of the set of source files stored in a versioned file tree repository global server 



Application/Control Number: 09/832,737 Page 5 

Art Unit: 2162 

and the current version of the set of sources files stored in another versioned file tree 
repository on each secondary global server. At a determined interval, the version 
delivery lists and the version change containers are distributed from the primary global 
server to each secondary server" (col. 4, lines 61-67 and col. 5, lines 1-4). This teaches 
the tree represent the multiples versions of data files. Therefore, it would have been 
obvious to one ordinary skill in the art at the time of the invention was made to modify 
Korzeniowski and Winn Schwartau's system to include the hierarchical trees structure 
files as taught Saether in order to keep track and easily restore files as needed. 

Regarding on claims 5 and 25, Korzeniowski and Winn Schwartau teaches the 
method recited in claim 4 and further comprising the step of republishing the target file 
at the target location (page 1 , lines 44-45) excepting for a selected revision. However, 
Saether teaches "the primary global server also generates a server change container 
for each for each secondary global server based on its path and difference between the 
updated version of the set of source files stored in a versioned file tree repository global 
server and the current version of the set of sources files stored in another versioned file 
tree repository on each secondary global server. At a determined interval, the version 
delivery lists and the version change containers are distributed from the primary global 
server to each secondary server" (col. 4, lines 61-67 and col. 5, lines 1-4). This 
suggests the updated version is the revision versions. Therefore, it would have been 
obvious to one ordinary skill in the art at the time was made to one ordinary skill in the 
art at the time of the invention was made to modify Korzeniowski and Winn Schwartau's 
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system to include multiples updates version as taught Saether to restore the file to the 
exactly point before the unauthorized changes. 

Regarding on claims 6, 17 and 26, Korzeniowski and Winn Schwartau's do not 
explicitly teaches the generated archive further comprises a folder. However, Saether 
teaches "the primary global server generated a version delivery list for each Secondary 
global server that indicates a particular update version for each local content server. 
The version delivery list also includes the file directory structure and the hardware 
constraints of each local content server" (col. 4, lines 57-61). The directory structure is 
the folder. Therefore, it would have been obvious to one ordinary skill in the art at the 
time pf the invention was made to modify Korzeniowski and Winn Schwartau's system 
to include file directory structure as taught Saether to perform the same function as the 
folder in order to organize the data in the easy manner to stored and retrieved. 

Regarding on claims 7 and 27, Korzeniowski and Winn Schwartau teaches the 
target file has a first set of associated file statistic and the archive file has a second set 
of associated file statistic, and wherein the step of periodically comparing comprises 
comparing the first set of associated file statistic to the second set of associated file 
statistic (page 1 , lines 42-45). 

Regarding on claims 9, 18 and 29, Korzeniowski teaches the method recited in 
claim 1 wherein the archive file comprises a web site file (page 1 , lines 42-45). 

Regarding on claims 10-11,19 and 30-31 , Korzeniowski teaches the method 
recited in claim 1, excepting for updating the archive file of the archive; and updating an 
update queue, wherein the update queue store update information relating to the target 
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file according to the update of the archive file. However, Saether teaches "the primary 
global server also generates a server change container for each for each secondary 
global server based on its path and difference between the updated version of the set of 
source files stored in a versioned file tree repository global server and the current 
version of the set of sources files stored in another versioned file tree repository on 
each secondary global server. At a determined interval, the version delivery lists and 
the version change containers are distributed from the primary global server to each 
secondary server" (col. 4, lines 61-67 and col. 5, lines 1-4). This suggests the updated 
versions are delivery to the target location. Therefore, it would have been obvious to 
one ordinary skill in the art at the time was made to one ordinary skill in the art at the 
time of the invention was made to modify Korzeniowski and Winn Schwartau's system 
to include multiples updates version as taught by Saether to update the files to reflex 
the changes to accompany the user demand. 

Regarding on claims 33-34, Korzeniowski teaches the comparison comprises 
comparing a hash of the contents of the target file to a hash of the contents of the 
corresponding archive file (page 1 , lines 41-45). 

5. Claims 12, 20 and 32 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Korzeniowski (Uncle Sam surfs via Lotus Notes) April 1 , 1996 in view of Winn 
Schwartau (Wipe out Web Graffiti, CNN.com) Feb 21 , 2000 and further in view of NTIS 
Data Grabber Web Site Security (on CD-ROM). 
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Regarding on claims 12, 20 and 32, Korzeniowski and Winn Schwartau teach the 
method recited in claim 1 excepting for moving files from the target location to a 
quarantine area if the step of comparing indicate that the target file differs from the 
archive file; and copying the archive file form the archive to target at the target location 
to synchronize with the target location with the archive. However, NTIS discloses the 
software to restore the hacked site to its original condition, and also retains the hacked 
version copies. Therefore, it would have been obvious to one ordinary skill in the art at 
the time of the invention was made to modify Korzeniowski and Winn Schwartau's to 
include the copies of the hacked web page as taught by NTIS in order to improve the 
web page security in the future. 



Conclusion 

6. Applicant's amendment necessitated the new ground(s) of rejection presented in 
this Office action. Accordingly, THIS ACTION IS MADE FINAL. See MPEP 
§ 706.07(a). Applicant is reminded of the extension of time policy as set forth in 37 
CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1 .136(a) will be calculated from the mailing date of 



Application/Control Number: 09/832,737 Page 9 

Art Unit: 2162 

the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the date of this final action. 

Contact Information 

7. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Baoquoc N. To whose telephone number is at 571-272- 
4041 or via e-mail BaoquocN.To@uspto.gov. The examiner can normally be reached 
on Monday-Friday: 8:00 AM -4:30 PM, EST. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, John Breene can be reached at 571-272-4107. 

Any inquiry of a general nature or relating to the status of this application or 
proceeding should be directed to the receptionist whose telephone number is (703) 305- 
3900. 

Any response to this action should be mailed to: 
Commissioner of Patents and Trademarks 
Washington, D.C. 20231 . 

The fax numbers for the organization where this application or proceeding is 
assigned are as follow: 

(703) 872-9306 [Official Communication] 

Hand-delivered responses should be brought to: 
Crystal Park II 
2121 Crystal Drive 
Arlington, VA 22202 
Fourth Floor (Receptionist). 
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